|Publication number||US7624452 B2|
|Application number||US 10/969,231|
|Publication date||Nov 24, 2009|
|Filing date||Oct 20, 2004|
|Priority date||Oct 20, 2004|
|Also published as||US20060085632|
|Publication number||10969231, 969231, US 7624452 B2, US 7624452B2, US-B2-7624452, US7624452 B2, US7624452B2|
|Inventors||Joel K. Young, Michael L. Zarns|
|Original Assignee||Digi International|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (11), Non-Patent Citations (5), Referenced by (6), Classifications (4), Legal Events (4)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This application is related to U.S. patent application Ser. No. 10/969,232, entitled “SYSTEM AND METHOD FOR BOOTING EMBEDDED SYSTEMS USING REMOVABLE STORAGE”, filed on even date herewith, which is incorporated herein by reference.
1. Field of the Invention
The present invention is related to embedded computer systems, and more particularly to a system and method for configuring embedded systems using removable storage.
2. Background Information
Embedded systems range from low-end systems such as networked sensors and smart cards to high-end systems such as routers, storage servers and web servers. One of the most cumbersome challenges of embedded device deployment is the initial and subsequent configuration.
Mechanisms exist in the world for active configuration of devices by connecting a local PC or PDA to a port and entering a series of special commands or doing the same over a network connection. Unfortunately, when a device needs to be replaced or initially deployed into a network environment, it cannot be just taken out of the box and deployed. Although DHCP and other mechanisms provide a vehicle to get a network address, oftentimes there is no way to find the device and its address without manual intervention. To counter this problem, some devices are preprogrammed with a “phone home” address to query for instructions on power up. However, this still doesn't solve the identification problem.
For example, a factory has a network of industrial 10 devices for a production line. Each device is on a network. The devices are for the most part duplicates in hardware, but are involved in different control functions. During the late shift, one of the devices fails and needs to be replaced. The ideal replacement model would be for the maintenance department to grab a new device, plug it in, and let it configure itself. The problem is that unless the device location and ID is programmed into the device ahead of time, this is not possible.
One could get over this problem by pre-configuring a spare device at each location, but this tends to drive up inventory and cost. If, however, the maintenance person can pull a spare, plug it in, and configure it, then the network could do the rest.
What is needed is a system and method of configuring an embedded device which addresses these problems and other problems which will become evident in the detailed discussion below.
In the following detailed description of the preferred embodiments, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration specific embodiments in which the invention may be practiced. It is to be understood that other embodiments may be utilized and structural changes may be made without departing from the scope of the present invention.
In embedded systems, software is typically loaded on nonvolatile memory (such as flash memory). The memory is tightly coupled to the system bus. This is done because the processor only knows to get its boot information from interfaces defined within the chip. In order to get the boot code into the flash, the chip must by programmed ahead of time using a programmer or new code must be loaded using a debugger interface. The flash may also be downloaded by other code currently running, but this then requires a reboot.
To date, embedded systems have had limited access to external memory. One reason for limiting access to external memory was to reduce cost. Another reason was to limit the opportunities to compromise the embedded device. Such limits have their cost. For instance, it can be difficult to swap in a new software system on an embedded device. And it can be difficult to recover a embedded system that has been disabled by an error, or by compromised code.
An embedded system 100 which addresses the above problems is shown in
In today's world, flash storage is available with a CF (Compact Flash) and USB interface. These are used today for additional storage after the embedded operating system and application is up and running. System 100 combines the notions of removable flash storage and device configuration such that a system's configuration can be initiated and managed from a remote storage device (USB, CF, etc.). In this way, the software system, including the operating system, can be configured, changed and modified using interchangeable and easily removable hardware components.
In one embodiment of the present invention, an embedded device is configured automatically through the insertion or connection of a removable storage device. Configuration may be at a number of different levels from (a) providing the unit a device name or identifier, (b) providing a network address and other routing information, (c) providing a complete or partial configuration of all unit parameters, (d) providing instructions for phoning home to get additional information or (e) providing a complete download of executable instructions (or firmware).
In one embodiment, removable media interface 116 is a configuration port configured to communicate with removable media 118 containing non-volatile memory. Removable media 118 may be a storage device selected from nonvolatile memory such as battery powered RAM, Flash, ROM, and EPROM. In one such embodiment, configuration port 116 communicates with removable media 118 through a communications protocol such as USB, serial, or Compact Flash.
In one embodiment, removable media 118 contains configuration information used to configure embedded system 100. In one such embodiment, configuration data is stored in the format described in U.S. Patent application Ser. No. 10/873,051, entitled “Device Server access Using a Data-Type Aware Markup Language”, filed Jun. 22, 2004 and assigned to the assignee of the present invention, the disclosure of which is incorporated herein by reference.
In one embodiment, configuration information is transferred from removable media 118 to system 100 using the method shown in
In the method shown in
At 204, system 100 checks the configuration key. If a configuration key has been returned, system 100 verifies as a function of the configuration key that that removable media 118 is (a) compatible and (b) has proper authorization. Control then moves to 206, where system 100 determines the type of configuration that is available. Note that a configuration adapter may house a number of configurations for different units and types.
If the device is allowed to accept that type of configuration, the appropriate configuration file is downloaded at 208. Note that one of the embedded devices may be setup at different times to accept different types of configurations—for example, if it is fresh out of the box, it may require complete configuration, included firmware download. Otherwise, it may only accept a new set of parameters, etc.
After downloading the configuration, it is applied to system 100 at 210. In one embodiment, when successful, system 100 powers down the port, signaling the user that removable media 118 may be disconnected from removable media interface 116, making the interface available for other uses.
A variety of approaches could be used to establish configuration keys. System 100 can used pre-shared keys, shared keys, private key/public key exchange as well as just exchanging a simple, unencrypted password. In any event, the notion is that a “password” is passed and encrypted. In one embodiment, certificates are used. Such an approach, however, can become too cumbersome.
Another notion about security is the ability to authenticate different levels or types of configuration. For example, some might only have authority to provide an ID update, while others can perform a complete firmware download. In one embodiment, this is done via permissions on user IDs. In one such embodiment, the permissions extend to the ability to completely restrict certain types of updates for the device, effectively turning off certain types of updates.
Portions of the above description have been presented in terms of algorithms and symbolic representations of operations on data bits within a computer memory. These algorithmic descriptions and representations are the ways used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. An algorithm is here, and generally, conceived to be a self-consistent sequence of steps leading to a desired result. The steps are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussions, terms such as “processing” or “computing” or “calculating” or “determining” or “displaying” or the like, refer to the action and processes of a computer system, or similar computing device, that manipulates and transforms data represented as physical (e.g., electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers or other such information storage, transmission or display devices.
Examples of articles comprising computer readable media are floppy disks, hard drives, CD-ROM or DVD media or any other read-write or read-only memory device.
Although specific embodiments have been illustrated and described herein, it will be appreciated by those of ordinary skill in the art that any arrangement which is calculated to achieve the same purpose may be substituted for the specific embodiment shown. This application is intended to cover any adaptations or variations of the present invention. Therefore, it is intended that this invention be limited only by the claims and the equivalents thereof.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US5579522 *||Jul 24, 1995||Nov 26, 1996||Intel Corporation||Dynamic non-volatile memory update in a computer system|
|US6167532 *||Feb 5, 1998||Dec 26, 2000||Compaq Computer Corporation||Automatic system recovery|
|US6178503 *||Sep 11, 1998||Jan 23, 2001||Powerquest Corporation||Managing multiple operating systems on a single computer|
|US6223284 *||Apr 30, 1998||Apr 24, 2001||Compaq Computer Corporation||Method and apparatus for remote ROM flashing and security management for a computer system|
|US6480146||Nov 29, 2001||Nov 12, 2002||Palm, Inc.||Intermittent use of a port in response to location data push|
|US6920553 *||Apr 28, 2000||Jul 19, 2005||Intel Corporation||Method and apparatus for reading initial boot instructions from a bootable device connected to the USB port of a computer system|
|US7136951||Feb 12, 2002||Nov 14, 2006||Guoshun Deng||Multifunction semiconductor storage device and a method for booting-up computer host|
|US7308570||Oct 20, 2004||Dec 11, 2007||Digi International Inc.||System and method for booting embedded systems using removable storage|
|US20020169976 *||May 10, 2001||Nov 14, 2002||Schelling Todd A.||Enabling optional system features|
|US20060031544||Jun 22, 2004||Feb 9, 2006||Digi International Inc.||Device server access using a data-type aware markup language|
|US20060085631||Oct 20, 2004||Apr 20, 2006||Young Joel K||System and method for booting embedded systems using removable storage|
|1||"U.S. Appl. No. 10/969,232-Comments on Statement of Reasons for Allowance filed Aug. 22, 2007", 2 pgs.|
|2||"U.S. Appl. No. 10/969,232-Non-Final Office Action mailed Jan. 29, 2007", 6 pgs.|
|3||"U.S. Appl. No. 10/969,232-Response filed Jun. 29, 2007 to Non-Final Office Action mailed Jan. 29, 2007", 12 pgs.|
|4||U.S. Appl. No. 10/969,232, Notice of Allowance mailed Aug. 9, 2007, 7 pgs.|
|5||*||Xilinx "System ACE CompactFlash Solution," Advance Product Specification, Apr. 5, 2002.|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US7818790 *||Sep 20, 2006||Oct 19, 2010||Erf Wireless, Inc.||Router for use in a monitored network|
|US7913076 *||Dec 18, 2007||Mar 22, 2011||Hewlett-Packard Development Company, L.P.||Method for changing the configuration of a media drive apparatus, computer readable medium, and media drive apparatus|
|US8065025 *||Mar 1, 2005||Nov 22, 2011||Abb Oy||Configuration of a frequency converter|
|US8151104 *||Jun 27, 2008||Apr 3, 2012||Lenovo (Singapore) Pte. Ltd.||Establishing user-defined management engine default settings stored in a system memory|
|US8533741 *||Dec 29, 2006||Sep 10, 2013||Sandisk Technologies Inc.||Methods for launching a program application|
|US20050195537 *||Mar 1, 2005||Sep 8, 2005||Panu Virolainen||Configuration of a frequency converter|
|Feb 28, 2005||AS||Assignment|
Owner name: DIGI INTERNATIONAL INC., MINNESOTA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:YOUNG, JOEL K.;ZARNS, MICHAEL L.;REEL/FRAME:015803/0839
Effective date: 20050201
|Feb 9, 2010||CC||Certificate of correction|
|Oct 26, 2010||CC||Certificate of correction|
|May 17, 2013||FPAY||Fee payment|
Year of fee payment: 4